2026

Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI 2026-09-28 at 14:58 By AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across business systems—often without the same controls applied to human users. According to Okta’s […]

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent 2026-09-28 at 14:46 By Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that’s targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. “The implant installs the framework unchanged, then overwrites its SOUL.md persona […]

Email spam filters cost GOP fundraisers estimated $117M in donations last year: bombshell study 2026-09-28 at 13:45 By Thomas Barrabi The little-noticed analysis, published on July 7 by Cameron Ellis of the University of Iowa and Lars Powell of the University of Alabama, could reignite long-running complaints by Republicans who have accused Google and other […]

The Image That Isn’t—Stopping SVG-Borne Attacks 2026-09-28 at 13:45 By Lionel Payet What security teams need to know about the latest wave of SVG attacks This article is an excerpt from SECURITY.COM View Original Source

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources 2026-09-28 at 13:44 By The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has called it an evolution of the threat actor’s tradecraft. […]

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally 2026-09-28 at 13:44 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerabilities are listed below – CVE-2026-88771 (CVSS score: […]